Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File: i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier: G5SlQeBcLOMqXyuktJTxOUKkqjmzoVsKybp8tJzt2hI=
Subject key identifier: F9:8D:4E:C2:6F:08:4E:0D:44:BB:B0:60:0A:BC:F8:0D:A7:F8:C1:D5
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial: 0194BC04E981CEBE366AABE9AD4F9CC4C961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: LNuPziOYyIrKubsBwXhoqEItKOI.roa (hash: HVHsB2c8MGUhz2rUlgm+F2HzTtyYnTiTaoLJeI/5tZw=)
2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: k8KSYO3HOpGLPfxDRNp+K2B/FzziGT9G8tty9/ZZkpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e9:81:ce:be:36:6a:ab:e9:ad:4f:9c:c4:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=f98d4ec26f084e0d44bbb0600abcf80da7f8c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:df:f1:d1:9f:e2:93:54:b6:ee:b8:c1:8f:
20:a4:b4:2a:07:94:e3:fe:88:c1:c7:d8:e5:c8:82:
25:bf:1a:ff:bc:bc:1f:36:ae:82:3f:c0:cc:f0:4d:
45:3a:a4:66:c9:54:20:be:a1:36:7c:b8:89:5b:b7:
09:f1:15:d9:bf:90:74:a8:52:9b:cb:9b:66:a5:f4:
86:67:a7:5d:c9:02:8b:26:ae:e8:10:7e:c1:da:71:
5b:b5:11:71:28:7b:c4:ac:78:2e:ff:3e:88:ef:c2:
9e:f4:95:7e:cb:06:25:30:ae:32:9b:8c:8a:75:8e:
38:24:e4:7c:2c:b4:ee:6b:1d:bf:b6:85:d0:86:b7:
ad:2c:84:5c:da:65:cf:b0:8d:17:2f:42:11:22:14:
30:7b:2f:e3:f4:9e:ae:cd:9e:2c:2f:82:e5:cf:fb:
b1:38:4b:56:1a:3c:45:4c:ad:0e:19:89:93:fb:73:
ce:c3:f9:1b:1b:e4:cc:66:98:99:66:0c:95:b3:92:
66:19:68:6e:19:49:61:67:11:25:d5:11:4d:87:a5:
b2:24:76:60:5a:d4:b2:63:15:6a:90:83:ee:38:92:
b2:ed:3b:10:29:7a:01:11:09:db:d4:26:68:a8:b2:
08:d2:56:34:20:76:37:8b:8b:a7:3d:01:7b:16:e1:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8D:4E:C2:6F:08:4E:0D:44:BB:B0:60:0A:BC:F8:0D:A7:F8:C1:D5
X509v3 Authority Key Identifier:
keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e9:a1:f7:ee:00:7b:7e:c7:9a:75:d8:c7:99:8e:b1:94:2e:
94:c1:38:ee:d5:e4:bd:59:ed:bf:f7:22:f5:85:8c:ca:35:57:
7d:6e:14:a8:3a:2e:0d:dd:6f:2e:c7:2b:da:c5:c3:2f:41:74:
f5:6a:9b:4f:62:0e:36:f8:f3:16:34:69:d0:8d:ef:13:10:b3:
67:42:b7:6d:81:77:28:36:ac:f5:2a:d1:40:c8:8c:6b:b8:b2:
1e:6c:59:53:c2:0d:9d:be:fe:e6:a7:2d:65:1c:95:27:ca:28:
19:5e:fd:2e:2d:66:83:26:58:9c:5d:ac:79:4f:72:4f:d3:73:
da:d9:b5:ce:fa:d1:fb:8b:eb:5a:f7:19:28:66:2a:5a:e5:84:
4a:dc:f1:50:dd:48:a8:4c:ab:41:cc:f6:68:04:9f:1e:08:bf:
4b:7f:6d:15:71:73:c5:ac:ce:05:6f:7a:30:89:c9:36:b5:0d:
ea:2f:d7:c2:9f:46:1b:9c:af:d2:ac:be:82:29:54:e2:48:3b:
7c:9a:23:f0:86:ed:3e:a4:ff:4a:9e:f8:d3:7a:9e:12:a6:a5:
06:22:00:77:cb:98:d1:f7:d3:78:a9:ee:e0:69:d7:ae:8d:1c:
62:69:9b:95:5d:46:bf:b8:4a:94:3d:26:52:3a:6d:39:b0:08:
ea:cd:e1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:23 2025 by rpki-client